diff options
| author | Edison Liu <Edison.Liu@mediatek.com> | 2018-01-11 15:57:41 +0800 |
|---|---|---|
| committer | Moyster <oysterized@gmail.com> | 2019-07-18 21:35:48 +0200 |
| commit | 0cdf30c59f4a9464d9c8fe85a37174c479e6408e (patch) | |
| tree | 9efeed0ddf523127e7d5e7997e54c4f2f0ec60ec /drivers/android | |
| parent | a0e750967210b4991decda1519eb17d82ae60eef (diff) | |
msdc: mt6735: fix code defect
[Detail]
A malicious userspace application can corrupt kernel memory.
the offset is not limited, so it will becomes a powerful arbitrary
memory read/write primitive.
[Solution]
set the limit of the offset from 0 to 0xFFFF
MTK-Commit-Id: 91446a30b6123dd3391074062dc9833d09dbcc54
Change-Id: Icf733233133bd8ed734ec69a3567e06281d982ff
Signed-off-by: Edison Liu <Edison.Liu@mediatek.com>
CR-Id: ALPS03684210
Feature: Others
Diffstat (limited to 'drivers/android')
0 files changed, 0 insertions, 0 deletions